General
-
Target
00fe9c97f0b8de9b925a29f3f77df12c9097e3f20cc4eacb1e42f2be7d7e2c68
-
Size
212KB
-
Sample
240404-wns57sec8v
-
MD5
2236937c6350dc13d760df72041a11eb
-
SHA1
18855107a4a1282b1542e62abd7770fa2906b34e
-
SHA256
00fe9c97f0b8de9b925a29f3f77df12c9097e3f20cc4eacb1e42f2be7d7e2c68
-
SHA512
d158fa8f1eb768293a5c1abaa16d20ad744f763f6bff041c24c7d111b01f5c4df6054a7a1ca8a20c39835263496fc3f0ac6f2d0bba4ae7dc94c1dfcc1e03b361
-
SSDEEP
1536:6QdH3UyOEGYf1m2wW4cd9Lv2PElgWy8NoN274B/K51UtaHElfTczpqVar1/AgAIk:hUxS1Lzp+QNoN2I0jASr2
Static task
static1
Behavioral task
behavioral1
Sample
00fe9c97f0b8de9b925a29f3f77df12c9097e3f20cc4eacb1e42f2be7d7e2c68.exe
Resource
win7-20240319-en
Behavioral task
behavioral2
Sample
00fe9c97f0b8de9b925a29f3f77df12c9097e3f20cc4eacb1e42f2be7d7e2c68.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
00fe9c97f0b8de9b925a29f3f77df12c9097e3f20cc4eacb1e42f2be7d7e2c68
-
Size
212KB
-
MD5
2236937c6350dc13d760df72041a11eb
-
SHA1
18855107a4a1282b1542e62abd7770fa2906b34e
-
SHA256
00fe9c97f0b8de9b925a29f3f77df12c9097e3f20cc4eacb1e42f2be7d7e2c68
-
SHA512
d158fa8f1eb768293a5c1abaa16d20ad744f763f6bff041c24c7d111b01f5c4df6054a7a1ca8a20c39835263496fc3f0ac6f2d0bba4ae7dc94c1dfcc1e03b361
-
SSDEEP
1536:6QdH3UyOEGYf1m2wW4cd9Lv2PElgWy8NoN274B/K51UtaHElfTczpqVar1/AgAIk:hUxS1Lzp+QNoN2I0jASr2
Score10/10-
Modifies visiblity of hidden/system files in Explorer
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-